From 79fd6143c05dd1ac432ed02eede1e6bf632c89af Mon Sep 17 00:00:00 2001 From: xumia Date: Wed, 5 Apr 2023 10:10:32 +0000 Subject: [PATCH 1/4] [Security] Fix the redis security issue CVE-2023-28858 --- test/requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/test/requirements.txt b/test/requirements.txt index dcb5b8d..3e3534a 100644 --- a/test/requirements.txt +++ b/test/requirements.txt @@ -1,2 +1,2 @@ -redis==2.10.5 +redis==4.3.6 requests==2.25.0 From 8af41a7c2af28a577c59373845bb49358dacafd4 Mon Sep 17 00:00:00 2001 From: xumia Date: Sun, 9 Apr 2023 14:08:53 +0000 Subject: [PATCH 2/4] Fix ubuntu-18.04 not found issue --- azurepipeline.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/azurepipeline.yml b/azurepipeline.yml index 395b6ba..b1efb99 100644 --- a/azurepipeline.yml +++ b/azurepipeline.yml @@ -10,7 +10,7 @@ pr: jobs: - job: Build pool: - vmImage: ubuntu-18.04 + vmImage: ubuntu-20.04 variables: DIFF_COVER_CHECK_THRESHOLD: 80 @@ -58,7 +58,7 @@ jobs: set -ex # Install .NET CORE curl -sSL https://packages.microsoft.com/keys/microsoft.asc | sudo apt-key add - - sudo apt-add-repository https://packages.microsoft.com/ubuntu/18.04/prod + sudo apt-add-repository https://packages.microsoft.com/ubuntu/20.04/prod sudo apt-get update sudo apt-get install -y dotnet-sdk-5.0 displayName: "Install .NET CORE" From dacfd4fe45499747a7d48618de95f013646b89c8 Mon Sep 17 00:00:00 2001 From: xumia Date: Mon, 10 Apr 2023 01:04:01 +0000 Subject: [PATCH 3/4] Use python 2.7 --- azurepipeline.yml | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/azurepipeline.yml b/azurepipeline.yml index b1efb99..f702443 100644 --- a/azurepipeline.yml +++ b/azurepipeline.yml @@ -21,6 +21,11 @@ jobs: - checkout: self clean: true + # TODO: upgrade to python3 + - task: UsePythonVersion@0 + inputs: + versionSpec: '2.7' + - script: | set -ex ./build.sh From d85717eebe8fe23459db4446b4873a11264decf8 Mon Sep 17 00:00:00 2001 From: xumia Date: Tue, 11 Apr 2023 02:12:11 +0000 Subject: [PATCH 4/4] [Security] Fix the redis security issue CVE-2023-28859 --- test/requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/test/requirements.txt b/test/requirements.txt index 3e3534a..9cb98ad 100644 --- a/test/requirements.txt +++ b/test/requirements.txt @@ -1,2 +1,2 @@ -redis==4.3.6 +redis==4.5.4 requests==2.25.0